
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa
File: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (raw, json)
Hash identifier: gHOFFAMzJX67LZAd50wxnRJO1gH2l+8DoQ6h8IDez6o=
Subject key identifier: A9:AA:40:D0:7E:12:5F:39:A9:EC:66:3C:0B:4D:4D:C3:A3:F9:4A:81
Certificate issuer: /CN=A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47
Certificate serial: 70D7F4C63CC05A9DD71A31A46C5D67B0C7B46F4C
Authority key identifier: A7:1C:6F:39:EB:BF:CC:0D:F1:0C:4D:6D:BB:72:55:E6:92:8C:5C:47
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa
Signing time: Sun 03 May 2026 03:16:23 +0000
ROA not before: Sun 03 May 2026 03:11:23 +0000
ROA not after: Sun 02 May 2027 03:16:23 +0000
asID: 142395
IP address blocks: 103.172.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl
rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d7:f4:c6:3c:c0:5a:9d:d7:1a:31:a4:6c:5d:67:b0:c7:b4:6f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47
Validity
Not Before: May 3 03:11:23 2026 GMT
Not After : May 2 03:16:23 2027 GMT
Subject: CN=A9AA40D07E125F39A9EC663C0B4D4DC3A3F94A81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:22:73:30:9f:c7:a6:2e:10:0a:c8:0c:79:
e6:0c:7e:01:af:2d:b8:5e:13:8e:c2:17:d6:63:f0:
b5:ef:c9:42:2e:3b:26:0c:4a:23:ee:df:75:59:f3:
90:f2:ab:fa:14:1b:27:4a:0c:fb:44:b2:0b:a1:c9:
4a:4e:12:dc:67:f8:4e:5c:18:8c:09:4a:39:ec:9d:
71:78:56:a9:6d:75:83:49:b0:68:ea:02:14:c1:ac:
96:03:0a:98:46:76:34:0b:af:13:80:4a:f3:b4:5d:
0d:c2:b9:66:d7:fd:c4:f0:e0:d8:58:45:9a:1e:5d:
22:c3:26:5c:8a:c0:33:5b:82:fd:00:67:64:0d:3d:
a0:f2:1d:50:d5:b1:99:54:23:69:bc:e2:8c:71:20:
fd:cd:ca:9a:ae:ed:e5:03:21:4c:26:b5:6b:c6:8a:
94:dc:2c:9d:86:e5:d0:84:59:7d:b6:0f:d5:c7:b3:
69:47:ca:61:50:49:2d:83:09:a9:0b:13:0e:73:73:
e4:e0:15:b9:31:67:8b:92:32:13:f6:d1:2e:cf:96:
31:1e:8f:08:56:b0:be:97:d3:32:77:3a:9d:61:c5:
ed:1b:7a:2a:7e:1f:67:4e:77:4c:9d:c8:48:6e:99:
09:4c:51:88:8e:78:da:96:da:4c:d9:be:c9:c5:47:
54:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AA:40:D0:7E:12:5F:39:A9:EC:66:3C:0B:4D:4D:C3:A3:F9:4A:81
X509v3 Authority Key Identifier:
keyid:A7:1C:6F:39:EB:BF:CC:0D:F1:0C:4D:6D:BB:72:55:E6:92:8C:5C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.118.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:52:ff:8d:1d:2c:67:a3:96:c3:79:0f:51:77:a2:58:eb:c8:
e9:68:22:df:73:8c:70:9f:c6:d4:e5:25:c8:d0:48:ce:c3:51:
ae:ad:90:31:d2:c2:0e:eb:d2:fe:e9:42:af:71:c5:86:30:e8:
6f:08:01:70:6e:7b:d0:cb:41:1e:bd:bc:3f:20:1d:60:df:bd:
4a:9e:00:61:ed:3f:fd:69:96:67:01:79:21:e9:3b:c1:b3:1e:
85:99:14:8d:d6:d9:66:e6:91:c1:da:03:d5:ad:b1:2c:60:b9:
49:0c:9d:2d:ad:28:12:32:5b:0e:70:47:32:12:a9:9e:96:26:
49:07:0f:28:07:a9:12:59:ee:aa:ac:62:96:0f:75:fc:e1:c2:
ae:c4:9a:dc:e2:21:0c:d5:06:a0:38:8c:73:c8:e8:bd:93:d6:
09:d9:83:db:a1:6b:ff:d1:2c:24:af:91:ef:5f:d2:0a:40:55:
77:5f:5a:5b:9a:59:f4:64:bd:fe:ae:9a:3c:76:1d:e2:69:f9:
7c:75:26:89:91:8e:3e:54:c1:a5:03:62:53:9d:a8:31:25:ef:
86:3d:6b:ee:53:91:b0:b9:8a:09:17:e9:e8:03:61:2d:1e:eb:
4e:4c:82:9b:4a:87:b3:8b:a7:a1:d0:0e:77:7f:43:16:da:dc:
74:d2:05:27
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUcNf0xjzAWp3XGjGkbF1nsMe0b0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTcxQzZGMzlFQkJGQ0MwREYxMEM0RDZEQkI3MjU1RTY5
MjhDNUM0NzAeFw0yNjA1MDMwMzExMjNaFw0yNzA1MDIwMzE2MjNaMDMxMTAvBgNV
BAMTKEE5QUE0MEQwN0UxMjVGMzlBOUVDNjYzQzBCNEQ0REMzQTNGOTRBODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZXSJzMJ/Hpi4QCsgMeeYMfgGv
LbheE47CF9Zj8LXvyUIuOyYMSiPu33VZ85Dyq/oUGydKDPtEsguhyUpOEtxn+E5c
GIwJSjnsnXF4VqltdYNJsGjqAhTBrJYDCphGdjQLrxOASvO0XQ3CuWbX/cTw4NhY
RZoeXSLDJlyKwDNbgv0AZ2QNPaDyHVDVsZlUI2m84oxxIP3Nypqu7eUDIUwmtWvG
ipTcLJ2G5dCEWX22D9XHs2lHymFQSS2DCakLEw5zc+TgFbkxZ4uSMhP20S7PljEe
jwhWsL6X0zJ3Op1hxe0beip+H2dOd0ydyEhumQlMUYiOeNqW2kzZvsnFR1SdAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUqapA0H4SXzmp7GY8C01Nw6P5SoEwHwYDVR0j
BBgwFoAUpxxvOeu/zA3xDE1tu3JV5pKMXEcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjA0ZTk3ZDMtNzFjMy00ZDBhLThiMDQtNzA4OGZlMzgyYmMzLzAvQTcxQzZGMzlF
QkJGQ0MwREYxMEM0RDZEQkI3MjU1RTY5MjhDNUM0Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNzFDNkYzOUVCQkZDQzBERjEwQzRENkRCQjcyNTVFNjkyOEM1
QzQ3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YwNGU5N2QzLTcxYzMtNGQwYS04
YjA0LTcwODhmZTM4MmJjMy8wLzMxMzAzMzJlMzEzNzMyMmUzMTMxMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM5MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnrHYwDQYJ
KoZIhvcNAQELBQADggEBAD5S/40dLGejlsN5D1F3oljryOloIt9zjHCfxtTlJcjQ
SM7DUa6tkDHSwg7r0v7pQq9xxYYw6G8IAXBue9DLQR69vD8gHWDfvUqeAGHtP/1p
lmcBeSHpO8GzHoWZFI3W2WbmkcHaA9WtsSxguUkMnS2tKBIyWw5wRzISqZ6WJkkH
DygHqRJZ7qqsYpYPdfzhwq7EmtziIQzVBqA4jHPI6L2T1gnZg9uha//RLCSvke9f
0gpAVXdfWluaWfRkvf6umjx2HeJp+Xx1JomRjj5UwaUDYlOdqDEl74Y9a+5TkbC5
igkX6egDYS0e605MgptKh7OLp6HQDnd/Qxba3HTSBSc=
-----END CERTIFICATE-----
Generated at Wed May 13 05:44:20 2026 by rpki-client